Unfortunately XML signatures are also widely used in Polish government APIs whic...

vbezhenar · 2024-09-19T01:34:43 1726709683

Same here in Kazakhstan. And we also use our home-made crypto algorithms (derived from USSR GOST), which are not present in popular open source libraries.

notpushkin · 2024-09-19T10:02:43 1726740163

Are those different from Russian GOST algorithms? I think there’s a bunch of libraries (mostly forks of other popular open source libraries) for that.

vbezhenar · 2024-09-23T07:54:03 1727078043

I don't really know, sorry. We have our own identifiers for algorithms like СТ РК ГОСТ Р 34.10-2015, СТ РК ГОСТ Р 34.11-2015 and our local company (nitec.kz) creates SDK which includes implementations of those algorithms for Java and OpenSSL.

Whether they copied those algorithms from Russian ones, I don't know, never researched that.

magicalhippo · 2024-09-19T01:31:25 1726709485

Same in Sweden and Denmark, several gov't systems requiring signed XMLs. And before you think legacy systems, no, these are the new systems, with rollout starting a few years ago and still ongoing.

jpnc · 2024-09-19T05:30:54 1726723854

That's essentially true for all of EU. If you've ever done integration with EU central services you know what I'm talking about.

intelVISA · 2024-09-19T18:07:43 1726769263

Makes sense, the EU favors architecture astronauts over profitable technology.